RHBA-2011:1133 - Bug Fix Advisory

Topic

Updated tftp packages that fix two bugs are now available for Red Hat Enterprise
Linux 6.

Description

The Trivial File Transfer Protocol (TFTP) is normally used only for booting
diskless workstations. The tftp package provides the user interface for TFTP,
which allows users to transfer files to and from a remote machine. The
tftp-server package provides the server for TFTP which allows users to transfer
files to and from a remote machine.

This update fixes the following bugs:

• When the small files were transferred and the "-v" option was enabled, the

tftp client printed incorrect statistics about the transfer. This update fixes
printing of the transfer statistics. (BZ#655830)

• The tftpd daemon did not correctly handle the utimeout option value. If a

client specified a utimeout value within the permitted range, it caused the
tftpd process to crash. This crash only affected the current tftp request.
(BZ#714240)

All users of tftp and tftp-server should upgrade to these updated packages,
which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 655830 - tftp transferring small files and using -v returns strange values
• BZ - 714240 - tftp: utimeout option parsing buffer overflow

CVEs

(none)

References

(none)